Mustafa Emre Gül ECK Hotel 1.0 - Cross-Site Request Forgery (Add Admin)
webapps php

Engin Demirbilek Centreo 19.10.8 - 'DisplayServiceStatus' Remote Code Execution
webapps php

SunCSR LeptonCMS 4.5.0 - Persistent Cross-Site Scripting
webapps php CVE-2020-12707

Roberto Piña AVAST SecureLine 5.5.522.0 - 'SecureLine' Unquoted Service Path
local windows

Víctor García Veyon 4.3.4 - 'VeyonService' Unquoted Service Path
local windows

Jinson Varghese Behanan WordPress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting
webapps php CVE-2020-10385

SunCSR UliCMS 2020.1 - Persistent Cross-Site Scripting
webapps php CVE-2020-12704

qw3rTyTy Joomla! com_hdwplayer 4.2 - 'search.php' SQL Injection
webapps php

Matthew Aberegg rConfig 3.9.4 - 'search.crud.php' Remote Command Injection
webapps php CVE-2020-10879

LiquidWorm FIBARO System Home Center 5.021 - Remote File Include
webapps multiple

Milad karimi Wordpress Plugin PicUploader 1.0 - Remote File Upload
webapps php

Cem Onat Karagun Google Chrome 80.0.3987.87 - Heap-Corruption Remote Denial of Service (PoC)
dos windows

Ivan Marmolejo ProficySCADA for iOS 5.0.25920 - 'Password' Denial of Service (PoC)
dos ios

Rich Mirch VMware Fusion 11.5.2 - Privilege Escalation
local macos CVE-2020-3950

Metin Yunus Kandemir Exagate Sysguard 6001 - Cross-Site Request Forgery (Add Admin)
webapps php

Maurizio S Broadcom Wi-Fi Devices - 'KR00K Information Disclosure
remote multiple CVE-2019-15126